[0]: https://chromewebstore.google.com/detail/microsoft-editor-sp...
- Access your data for all websites
- Display notifications to you
- Access browser tabs
I guess we know why Grammarly never has any problems raising more funding.
For more advanced CSP bypass with extension, you can:
1. Inject JS code into any webpage with a CSP.
2. Create an event listener for your content script and reacting according to it.
3. Use your content script to communicate with the background script.
4. Use the background script to communicate with any website, including blocked websites by the CSP.
Basically, any website <-> extension content script <-> background script <-> any website.